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Abstract — In this paper we develop network protection 
schemes against two link failures in optical networks. The 
motivation behind this work is the fact that the majority of 
all available links in an optical network suffer from single and 
double link failures. In the proposed network protection schemes, 
NPS2-I and NPS2-II, we deploy network coding and reduced 
capacity on the working paths to provide backup protection 
paths. In addition, we demonstrate the encoding and decoding 
aspects of the proposed schemes. 

Index Terms — Network Protection, Optical Networks. 

I. Introduction 

One of the main services of operation networks that must be 
deployed efficiently is reliability. In order to deploy a reliable 
networking strategy, one needs to protect the transmitted sig- 
nals over unreliable links. Link failures are common problems 
that might occur frequently in single and multiple operating 
communication circuits. In network survivability and network 
resilience, one needs to design efficient strategies to overcome 
this dilemma. Optical network survivability techniques are 
classified as pre-designed protection and dynamic restora- 
tion lfl3l . ||8). The approach of using pre-designed protection 
aims to reserve enough bandwidth such that when a failure 
occurs, backup paths are used to reroute the transmission 
and be able to recover the data. Examples of this type are 
1-1 and 1-N protections J2], J9). In dynamic restoration 
reactive strategies, capacity is not reserved. However, when 
the failure occurs, dynamic recovery is used to recover the 
data nansmitted in the links that are suffered from failures. 
This technique does not need preserved resources or provision 
of extra paths that work in case of failure. In this work we 
will provide several strategies of dynamic restoration based on 
coding and reduced distributed fairness capacities. 

Network coding is a powerful tool that has been recently 
used to increase the throughput, capacity, and performance 
of communication networks. Information theoretic aspects of 
network coding have been investigated in lfT2l . UJ. Network 
coding allows the intermediate nodes not only to forward 
packets using network scheduling algorithms, but also en- 
code/decode them using algebraic primitive operations, see UJ, 
El, IfTZl and references therein. As an application of network 
coding, data loss because of failures in communication links 
can be detected and recovered if the sources are allowed to 
perform network coding operations. Network coding is used 



to maximize the throughput JJJ, ifTOl . Also, it is robust against 
packet losses and network failures (5), IfTT l. |6|. 

Network protection against single and multiple link failures 
using adding extra protection paths has been introduced in Q, 
0. The source nodes are able to combine their data into 
extra paths (backup protection paths) that are used to protect 
all signals on the working paths plain carrying data from all 
sources. In both cases, p-cycles has been used for protection 
against single and multiple link failures. 

In this paper we design two schemes for network protection 
against one and two failed links in a network with n disjoint 
working paths: NPS2-I and NPS2-II. The approach is based 
on network coding data originated by the sources. We assume 
that network capacity will be reduced by a partial factor in 
order to achieve the required protection. Several advantages 
of NPS2-I and NPS2-II can be stated as: 

• The data sent from the sources are protected without 
adding extra paths. Two paths out of the n disjoint 
working paths will carry encoded data, and hence they 
are protection paths. 

• The encoding and decoding operations are achieved with 
less computational cost at both the sources and receivers. 
The recovery from failures is achieved immediately with- 
out asking the senders to retransmit the lost data. 

• The normalized network capacity is (n — 2)/n, which 
is near-optimal in case of using a large number of 
connections. 

II. Network Model 

In this section we present the network model and basic 
terminology. 

i) Let Af be a network represented by an abstract graph 
G = (V, E), where V is a set of nodes and E be a set 
of undirected edges. Let S and R be sets of independent 
sources and destinations, respectively. The set V = V U 
S U R contains the relay, source, and destination nodes. 
Assume for simplicity that \S\ = \R\ = n, hence the set 
of sources is equal to the set of receivers. 

ii) A path (connection) is a set of edges connected together 
with a starting node (sender) and an ending node (re- 
ceiver). 

L t = {{si, eii), (eii, e 2l ), . . . , {e {m)i , n)}, 



2 



where 1 < i < n and (e^_ 1 - )i , eji) £ E for some integer 
m. 

iii) The node can be a router, switch, or an end terminal 
depending on the network model M and the transmission 
layer. 

iv) L is a set of paths L = {L\, L2, ■ ■ ■ , L n } carrying the data 
from the sources to the receivers as shown in Fig. [2] All 
connections have the same bandwidth, otherwise a con- 
nection with high bandwidth can be divided into multiple 
connections, each of which has a unit capacity. There are 
exactly n connections. For simplicity, we assume that the 
number of sources is less than or equal to the number of 
available paths. A sender with a high capacity can divide 
its capacity into multiple unit capacities, each of which 
has its own path. The failure on a link Li may occur due 
to the network circumstance such as a link replacement, 
overhead, etc. We do not address in this work the failure 
cause. However, we assume that there are one or two 
failures in the working paths and the protection strategy 
is able to protect/recover it. 

v) Each sender s; £ S will transmit its own data Xi to a 
receiver r; through a connection L;. Also, s; will transmit 
encoded data J^™ xi to at a different time slot if it is 
assigned to send the encoded data. 

vi) The data from all sources are sent in sessions. Each 
session has a number of time slots n. Hence t l s is a value 
at round time slot I in session S. 

vii) In this model Af if we consider only a single link failure, 
then it is sufficient to apply the encoding and decoding 
operations over a finite field with two elements, F2 = 
{0, 1}. However, if there are double failures, then a finite 
field with higher alphabets is required. 

viii) There are at least two receivers and two senders with at 
least two disjoint paths. Otherwise, the protection strategy 
can not be deployed for a single path, which it can not 
protect itself. 

We can define the network capacity in the light of min-cut 
max-flow information theoretic view (TJ. 

Definition 1: The capacity of a connecting path Li between 
Si and Ti is defined by 

{1, Li is active; 
0, otherwise. 

The total capacity is given by the summation of all paths' 
capacities. What we mean by an active link is that the receiver 
is able to receive and process signals/messages throughout this 
link. 

Clearly, if all links are active then the total capacity is n and 
normalized capacity is 1. In general the normalized capacity 
of the network for the active and failed links is computed as: 

1 ™ 

cv=-y>. (2) 

i=l 

We define the working paths and protection paths as fol- 
lows: 
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Fig. 1. Network protection against link/path failures using reduced capacity 
and network coding. Two paths out of n disjoint working paths carry encoded 
data for protection against two link failures. 



Definition 2: The working paths of a network with n 
connection paths are the paths that carry unencoded data traffic 
under normal operations. The Protection paths are paths that 
provide alternate backup paths to carry encoded data traffic in 
case of failures. A protection scheme ensures that data sent 
from the sources will reach the receivers in case of failure 
incidences on the working paths. 

Every sender s; prepares a packet packet Si ^ ri to send to 
the receiver r^. The packet contains the sender's ID, data x\, 
and a round time for every session t\ for some integers S and 
I. We have two types of packets: 

i) Packets sent without coding, in which the sender does not 
need to perform any coding operations. For example, in 
case of packets sent without coding, the sender Si sends 
the following packet to the receiver Ti. 

packet s% ^ r% := (ID Si , x\ , tj) (3) 

ii) Packets sent with encoded data, in which the sender needs 
to send other sender's data. In this case, the sender s, 
sends the following packet to receiver rf. 

n 

packet s ^ rz := (I D Sz , ^ x\,t\). (4) 

The value y\ = j^i x \ i s computed by every sender 

Si, by collecting the data from all other senders and 
encoding them using the bit-wise operation. 

In either case, the sender has a full capacity in the connection 

path Lj. 

The protection path that carries the encoded data from 
all sources is used for the data recovery in case of failure. 
Assuming the encoding operations occur in the same round 
time of a particular session, every source Si adds its value, for 
1 < i < n. Therefore, the encoded data over the protection 
path is yi = Y^ij=i i^j x r The decoding operations are done 
at every receiver Ti by adding the data Xi received over the 
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working path L,-. The node with failed connection L/~ will 
be able to recover the data Xk- Assuming all operations are 
achieved over the binary finite field F2. Hence we have 



Xk = Vi 



(5) 



III. Protections Using Dedicated Paths (NPS2-I) 

In this section we develop a network protection scheme 
(NPS2-I) for two link failures in optical networks. The protec- 
tion scheme is achieved using network coding and dedicated 
paths. Assume we have n connections carrying data from a set 
of n sources to a set of n receivers. All connections represent 
disjoint paths, and the sources are independent of each other. 
The authors in Q, J5] introduced a model for optical network 
protection against a single link failure using an extra and 
dedicated paths provisioning. In this model NPS2-I we extend 
this approach to two link failures. 

We will provide two backup paths to protect against any 
two disjoint links, which might experience failures. These two 
protection paths can be chosen using network provisioning. 
The protection paths are fixed for all rounds per session, 
but they may vary among sessions. For example, sender 
transmits a message x\ to a receiver r*j at time tg in round 
time £ in session 5. This process is explained in Scheme (0 
as: 
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All yj's are defined as: 

n n 

The coefficients a\ and bj are chosen over a finite field F q 
with q > n — 2, see for more details. One way to choose 
these coefficients is by using the follow two vectors. 



1 1 1 

1 a a 2 

Therefore, the coded data is 
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„n-3 



vj = £ x i and y e k = 2 



a i modn-2i 



(8) 



(9) 



In the case of two failures, the receivers will be able to solve 
two linearly independent equations in two unknown variables. 
For instance, assume the two failures occur in paths number 
two and four. Then the receivers will be able to construct two 
equations with cofficients 



1 

Q 



1 

a 3 



Therefore, we have 



ax 2 + a £4 



(10) 



(11) 
(12) 



One can multiply the first equation by a and subtract the two 
equations to obtain value of x\. 

We notice that the encoded data symbols and yf, are fixed 
per one session transmission but it is varied for other sessions. 
This means that the path Lj is dedicated to send all encoded 
data y},yj, ■ ■ .,y%. 

Lemma 3: The normalized capacity of NPS2-I of the net- 
work model j\[ described in (|6]l is given by 



C = (n- 2) jn. 



(13) 



Proof: There are n rounds in every session. Also, we have 
n connections per a round time. There exist two connections 
which carry backup data for protection, hence there are n — 2 
connections that carry working data. Therefore, the normalized 
capacity is given as: 

C = (n - 2)n/n 2 , 

which gives the result. ■ 
In NPS2-I there are three different scenarios for two link 
failures, which can be described as follows: 

i) If the two link failures occur in the backup protection 
paths Lj and Lk, then no recovery operations are required 
at the receivers side. The reason is that these two paths 
are used for protections, and all other working paths will 
convey the data from the senders to receivers. 

ii) If the two link failures occur in one backup protection 
path say Lj and one working path Lj, then recovery 
operations are required. The receiver rj must recover its 
data using one of the protection paths. 

iii) If the two link failures occur in two working paths, then 
in this case the two protection paths are used to recover 
the lost data. The idea of recovery in this case is to build 
a system of two equations with two unknown variables. 

IV. Protection Against Two Link Failures 
(NPS2-II) 

In this section we will provide an approach for network pro- 
tection against two link failures in optical networks. We deploy 
network coding and distribute capacity over the working paths. 
We will compute the network capacity in this approach. In [ 3 ] 
we will illustrate the tradeoff and implementation aspects of 
this approach, where there is enough space for details. 

We assume that there is a set of n connections that need 
to be protected with %100 guarantee against single and two 
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link failures. Assume F g is a finite field with q elements. For 
simplicity we consider n is an even number. 

A. Two Link Failures, Achieving (n — 2)/n Capacity 

Let x\ be the data sent from the source s, at round time I 
in a session at time t$. Also, assume the encoded data yi — 



Data 
distributor 



Put differently: 
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(14) 



The protection scheme NPS2-II runs in sessions as explained 
below. Every session has at most one single failure through out 
its each round time. As shown in Scheme ( [151 ). the protection 
matrix for the first session is given by the following protection 
code: 
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Fig. 2. The encoding and decoding operations are done at the data distributor 
and collector, respectively. 



be an index of an arbitrary session that has two link failures. 
We have n paths that have capacity n. Also, we have I = n/2 
round times, in which each round time has n — 2 capacity in 
the working paths. Therefore the total capacity is given by 



(n - 2)(£) = (n 2 - 2n)/2. 



(18) 



(15) 



for (21 - 1) < k < 2i, 1 < I < n/2. 



(16) 



All coefficients are taken from F q for q > n — 2, see for 
more details. Also, the two vectors shown in [8] can be used in 
this case. We note that the data symbols in NPS2-II are sent 
in independent sessions. This means that every session has its 
own recovery scheme. Also, two failures occur in only two 
connections during the session round times. Hence the sender 
Si sends the message x\ for all 1 < j < £ — 1 and 1 < i < n 
during the first session. One can always change the round time 
of the encoded data y e k and the data x\ for any round time j 
in the same session. 

Now, we shall compute the normalized capacity of NPS2-II 
for the network N at one particular session; the first session. 
The capacity is calculated using the well-known min-cut max- 
flow theorem 0]. 

Theorem 4: The optimal fairness distributed normalized 
capacity of NPS2-II shown in Scheme ( TT3T > is given by 



C = (n- 2)/n. 



(17) 



Proof: Let n be the number of sources, each of which 
has a unit capacity in the connection Li from Si to r^. Let j 



By normalizing this value with the total capacity n£, then the 
result follows. ■ 

The network protection strategy NPS2-II against one or 
two link failures is deployed in two processes: Encoding and 
decoding operations. The encoding operations are performed 
at the set of sources, in which one or two sources will send 
the encoded data depending on the number of failures. The 
decoding operations are performed at the receivers' side, in 
which receivers with failed links had to receive all other 
receivers' data in order to recover their own data. Depending 
on NPS2-I or NPS2-II the receivers will experience some delay 
before they can actually decode the packets. The transmission 
is done in rounds, hence linear combinations of data has to 
be from the same round time. This can be achieved using the 
round time that is included in each packet sent by a sender. 

Assume there are data collectors S and 1Z at the senders 
and receivers, respectively. They can be a sender (receiver) 
node to send (receiver) encoded data, see 0. 

Encoding Process: The encoding operations are for each 
round per a session. 

• The source nodes send a copy of their data to the data 
distributor <S, then 5 will decide which source will send 
the encoding data yl and all other sources will send their 
own data x\. This process will happen in every round 
during transmission time. 

• The encoding is done by linear operation of sources' 
coefficients which is the fastest arithmetic operation that 
can be performed among all sources' data. 

• The server S will change the sender s, that should send 
the encoded data y\ in every round of a given session for 
the purpose of fairness and distributed capacities. 

Decoding Process: The objective of the decoding and recovery 
process is to withhold rerouting the signals or the transmitted 
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packets due to link failures, see 12), Gl, (U- However, we 
provide strategies that utilize network coding and reduced 
capacity at the source nodes. We assume that the receiver 
nodes are able to perform decoding operations using a data 
collector 1Z. 

We assume there is a data distributor 1Z that will collect 
data from all working and protection paths and is able to 
perform the decoding operations. In this case we assume that 
all receivers R have available shared paths with the data 
collector 1Z. At the receivers side, if there are two failures 
in paths Lj and L^, then there are several situations. 

• If the paths Lj and Lf. carry unencoded data (working 
paths), then the data distributor 1Z must query all other 
nodes in order to recover the failed data. In this case 
and rj must query 1Z to retrieve their lost data. 

• If the path Lk carries encoded data yk (protection path) 
and Lj carries unencoded data (working path), then data 
collector 1Z must query all other receivers in order to 
perform decoding, and rj receives the lost data Xj. 

• If the paths Lj and Lk carry encoded data (they are both 
protection paths), then no action is required. 
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V. Conclusion 

In this paper we presented network protection schemes 
NPS2-I and NPS2-II against single and double link failures in 
optical networks. We showed that protecting two failures can 
be achieved using network coding and reduced capacity. The 
normalized capacity of the proposed schemes is (n — 2)/n, 
which is near optimal for a large number of connections. 
Extended version of this paper will appear in J51, where 
protection against t multiple failures is investigated. 
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